2.2 Ensure the Log Config Module Is Enabled

Information

The 'log_config' module provides for flexible logging of client requests and for the configuration of the information in each log.

Rationale:

Logging is critical for monitoring usage and potential abuse of your web server. To configure web server logging using the 'log_format' directive, this module is required.

Solution

Perform either one of the following:
- For source builds with static modules, run the Apache './configure' script without including the '--disable-log-config' script options.

$ cd $DOWNLOAD/httpd-2.2.22
$ ./configure

- For dynamically loaded modules, add or modify the 'LoadModule' directive so that it is present in the Apache configuration as below and not commented out:

LoadModule log_config_module modules/mod_log_config.so

See Also

https://workbench.cisecurity.org/files/2378

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-12, CSCv6|6.2, CSCv7|6.2, CSCv7|6.3

Plugin: Unix

Control ID: 72ed46063635e9ef43cfdf872df9ac29e223e8c96e4b9e3a2b26d0da9c5a4aa2